AZL-89040
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-89040.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-89040
- Upstream
- Published
- 2026-05-28T10:16:34Z
- Modified
- 2026-08-28T17:46:35.085453826Z
- Summary
- CVE-2026-46191 affecting package kernel for versions less than 6.6.141.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
fbcon: Avoid OOB font access if console rotation fails
Clear the font buffer if the reallocation during console rotation fails in fbconrotatefont(). The putcs implementations for the rotated buffer will return early in this case. See [1] for an example.
Currently, fbconrotatefont() keeps the old buffer, which is too small for the rotated font. Printing to the rotated console with a high-enough character code will overflow the font buffer.
v2: - fix typos in commit message
- References